KeePass is a free open source password manager, which helps you to manage your passwords in a secure way. You can store all your passwords in one database, which is locked with a master key. So you only have to remember one single master key to unlock the whole database. Database files are encrypted using the best and most secure encryption algorithms currently known (AES-256, ChaCha20 and Twofish).

KeePass is portable: it can be carried on an USB stick and runs on Windows systems without being installed.

Is KeePass trustworthy?

Yes, KeePass is a well known and safe application to use. This free password manager allows you to encrypt your password and other sensitive data with AES-256, ChaCha20, and Twofish encryption methods. For better privacy, you can lock your vault with multiple user keys and being open source, it can be audited by the public and verified that the encryption algorithms are implemented correctly.

Does KeePass save the database in the cloud?

No. KeePass stores all your passwords in one database, which is locked with a master key and stored locally in your system. The database consists of only one encrypted file, so it can be transferred easily from one computer to another or, with the portable version of KeePass, it can be carried on USB sticks and run on any computer without any installation.

What's the difference between KeePassXC and KeePass?

KeePassXC is a fork from the original KeePass project and both are open-source applications. A key difference is that KeePassXC is written in C++, while KeePass is written in C#. This translates to KeePassXC running natively in more platforms, while KeePass requires .NET on Windows and the Mono runtime libraries to run on other platforms.

Is KeePass really free?

Yes, KeePass is free and open-source. Open-source prevents backdoors. You can have a look at its source code and compile it yourself.

Which are the best KeePass alternatives?

Bitwarden is another free and open-source password manager like KeePass. If you are willing to pay for a password manager, LastPass is pretty good, but you might as well choose 1Password or Dashlane.

What's New

New Features

  • Added 'Compare Entries' command (in the main menu 'Entry' → 'Compare'), which compares the two entries that are selected in the main entry list.
  • Added 'Mark Entry for Comparison' and 'Compare Entry with Marked Entry' commands (in the main menu 'Entry' → 'Compare'); these two commands support comparing two entries that are stored in different databases (opened in tabs).
  • Report dialogs can now be closed by pressing the Esc key.
  • Added option 'Show warning when the key transformation settings are weak' (in 'Tools' → 'Options' → tab 'Security', turned on by default).
  • The options in the entry/group duplication dialog are remembered now.
  • The options in the HTML export/print dialog are remembered now.
  • In dialogs that have a 'Do not show this dialog again' option and multiple commands, the command that will always be used when turning on the option is now mentioned in the dialog.
  • Added 'More information' link in the dialog that is displayed when KeePass automatically disables enforcement-requiring items.
  • Added {NEWPASSWORD:/#/P/O/} placeholder, which generates a new password for the current entry using the specified pattern P and the option(s) O.
  • Added accessible names for some controls (custom keystroke sequence edit control in the auto-type item dialog, filter edit control in report dialogs, a few controls in the password generator dialog; if the option 'Optimize for screen reader' is turned on).
  • Added 'MasterKeyExpiryForce' configuration setting.
  • Enhanced Google Chrome passwords CSV import module to support the new format.
  • Enhanced mSecure CSV import module to support the new format.
  • Enhanced 1Password 1PUX import module to support the new password field/type.

Improvements

  • The toolbar in report dialogs is now a tab stop.
  • Increased default number of AES-KDF iterations.
  • Improved syntax highlighting for {CLIPBOARD-SET:...} placeholders (in the auto-type item editing dialog).
  • The node mode of the configuration element '/Configuration/Meta/PreferUserConfiguration' is now 'None' by default.
  • Improved INI loading performance.
  • Improved data size formatting.
  • Renamed value columns/commands in the history entry comparison dialog from 'A'/'B' to '1'/'2'.
  • Improved process memory protection of history entry comparisons.
  • Improved process memory protection of 'CryptoRandomStream' objects.
  • Improved thread safety of process memory protection on Unix-like systems.
  • The MSI file is now built using Visual Studio 2022.
  • Various UI text improvements.
  • Various code optimizations.
  • Minor other improvements.

Bugfixes

  • Searches using an XPath expression involving history entries now always regard all history entries.
  • KeePass now does not crash anymore when a plugin tries to upload a file to a server asynchronously.

2.54 Release Notes:

New Features:

  • Triggers, global URL overrides, password generator profiles and a few more settings are now stored in the enforced configuration file.
  • Added dialog 'Enforce Options (All Users)' (menu 'Tools' → 'Advanced Tools' → 'Enforce Options'), which facilitates storing certain options in the enforced configuration file.
  • Export confirmation dialog banners now have a yellow-orange background.
  • In export confirmation dialogs, the text of the 'OK' button is now changed to 'Confirm Export'.
  • In report dialogs, passwords (and other sensitive data) are now hidden using asterisks by default (if hiding is activated in the main window); the hiding can be toggled using the new '***' button in the toolbar.
  • The 'Print' command in most report dialogs now requires the 'Print' application policy flag, and the master key must be entered if the 'Print - No Key Repeat' application policy flag is deactivated.
  • The 'Export' command in most report dialogs now requires the 'Export' application policy flag, and the master key must be entered.
  • Single line edit dialogs now support hiding the value using asterisks.
  • On Unix-like systems, commands that require elevation now have a shield icon (like on Windows).
  • TrlUtil: added 'Move Selected Unused Text to Dialog Control' command.

Improvements:

  • Improved process memory protection of secure edit controls (CVE-2023-32784).
  • The content mode of the configuration elements '/Configuration/Application/TriggerSystem', '/Configuration/Integration/UrlSchemeOverrides' and '/Configuration/PasswordGenerator/UserProfiles' is now 'Replace' by default.
  • The built-in override for the 'ssh' URI scheme is now deactivated by default (it can be activated in the 'URL Overrides' dialog).
  • When opening the password generator dialog without a derived profile, the '(Automatically generated passwords for new entries)' profile is now selected by default, if profiles are enabled (otherwise the default profile is used).
  • Improved UI update performance in the password generator dialog.
  • Improved and renamed dialog banner styles.
  • The separator line of light dialog banners is gray now.
  • Improved serialization/deserialization of custom configuration settings (used by plugins).
  • Improved reporting of unknown database header fields.
  • On Unix-like systems, the clipboard workarounds are now disabled by default (they are not needed anymore on most systems).
  • Improved clipboard clearing on Unix-like systems.
  • Improved starting of an elevated process on Unix-like systems.
  • TrlUtil: improved keyboard shortcut assignment and toolbar construction.
  • Installer: the desktop shortcut is now created for all users (if the option 'Create a desktop shortcut' is activated).
  • Installer: removed the Quick Launch shortcut option.
  • Upgraded installer.
  • Various UI text improvements.
  • Various code optimizations.
  • Minor other improvements.

Bugfixes:

  • In report dialogs, the 'Print' and 'Export' commands now always use the actual data (in previous versions, asterisks were printed/exported when the application policy flag 'Unhide Passwords' was turned off).
  • The icon of the custom algorithm options button in the password generator dialog is not cut off anymore.

Classic 1.41

New Features:

  • Added {EDGE} placeholder, which is replaced by the executable path of the new (Chromium-based) Microsoft Edge, if installed.
  • The {FIREFOX} placeholder now supports detecting the Microsoft Store version of Firefox (in addition to the regular versions).
  • When trying to rearrange entries while automatic sorting is activated, KeePass now asks whether to deactivate automatic sorting.
  • Added border for headings in HTML exports/printouts.
  • Added horizontal entry separator lines in HTML exports/printouts.

Improvements:

  • Improved item separation in the entry details view.
  • When moving an entry fails, the last access time of the entry is not updated anymore.
  • Improved HTML generation for HTML exports/printouts.
  • Improved fonts used when printing or exporting to HTML.
  • HTML exports/printouts: improved encoding of white-space characters in passwords.
  • Reordered fields/columns in exports for improved consistency.
  • Upgraded to Boost libraries version 1.81.0.
  • Various code optimizations.
  • Minor other improvements.

2.53

New Features:

  • For each entry listed on the 'History' tab page of the entry dialog, the fields modified with respect to the previous entry are displayed.
  • Added 'Compare' button on the 'History' tab page of the entry dialog; when two (not necessarily consecutive) history entries are selected, clicking the button shows a detailed comparison (with values, etc.).
  • When editing an entry, the history entry list of the entry dialog now contains an entry called 'Dialog (unsaved)', which represents all data entered in the current dialog (other tab pages).
  • When editing an entry, the history entry list of the entry dialog now contains an entry called 'Current (TIME)', which is the entry that is currently stored in the database (without any changes made in the current dialog).
  • Added 'History' command in the 'Find' main menu; it lists all entry modifications (sorted by time).
  • Added filter box in most report dialogs (last modified entries, history, large entries, similar password clusters, password quality, history entry comparison, database file search, ...).
  • Added 'Print' button in most report dialogs.
  • Added 'Export' button in most report dialogs; supported formats are CSV and HTML.
  • Added {EDGE} placeholder, which is replaced by the executable path of the new (Chromium-based) Microsoft Edge, if installed.
  • Added URL override suggestion for Microsoft Edge in private mode in the URL override suggestions drop-down list of the entry dialog.
  • Added optional built-in global URL overrides for opening HTTP/HTTPS URLs with Microsoft Edge in private mode.
  • When trying to rearrange entries while automatic sorting is activated, KeePass now asks whether to deactivate automatic sorting.
  • Added access keys in the tags button drop-down menu of the entry/group dialogs.
  • Added access keys in the 'View' → 'Sort By' menu.
  • Added access keys in the entry templates menu.
  • Added access keys in the 'Perform Auto-Type' menu (which is displayed if the 'Show additional auto-type menu commands' option is turned on).
  • Added {HMACOTP} and {TIMEOTP} in the 'Perform Auto-Type' menu.
  • Added keyboard shortcut Ctrl+T for the 'Copy Time-Based OTP' entry data command.
  • Added keyboard shortcut Ctrl+Shift+T for the 'Show Time-Based OTP' entry data command.
  • Enhanced Password Depot XML import module to support the new format (added support for the new node names, group icons, recycle bin, tags, favorites, auto-type delay conversion, history, enhanced icon mapping, enhanced date/time parsing, ...).
  • Added border for headings in HTML exports/printouts.
  • Added support for running KeePass in FIPS mode.

Improvements:

  • History entries listed on the 'History' tab page of the entry dialog are now sorted from newest to oldest.
  • The icons in the list on the 'History' tab page of the entry dialog now indicate the type of the entry.
  • History entry controls of the entry dialog are now disabled when creating a new entry.
  • The history entry 'Restore' button is now disabled when any change has been made in the current dialog.
  • The 'Password modified' time is now updated immediately when deleting a history entry.
  • Improved URL override suggestion for Microsoft Edge in the URL override suggestions drop-down list of the entry dialog (changed from 'microsoft-edge:{URL}' to 'cmd://{EDGE} "{URL}"').
  • Improved optional built-in global URL overrides for opening HTTP/HTTPS URLs with Microsoft Edge (changed from 'microsoft-edge:{BASE}' to 'cmd://{EDGE} "{BASE}"').
  • Reordered web browser URL overrides alphabetically.
  • Improved dynamic menu item access key assignment.
  • Improved item separation in the entry details view.
  • In most places, groups in a group path are now separated by right arrows instead of hyphens.
  • Improved last modification time comparison for plugin data dictionaries.
  • Unified generation of common HTML parts.
  • The 'Copy Initial Password' command in the 'Tools' menu of the entry dialog now requires the 'Copy' application policy flag.
  • Various UI text improvements.
  • Various code optimizations.
  • Minor other improvements.

Bugfixes:

  • The history entry 'Restore' button now always works as expected.